Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

getting rid of aurora please help! [RESOLVED]

giggler

Posted 29 May 2005 - 08:24 AM

giggler

New Member

Member

3 posts

elloi have done numorous scans with differnt anti-virus and anti-spyware companys but they dont pick it up or when they do it just keeps coming back.it is causing my connection to slow up and im am getting pop-ups aswell.i have done everything what you said in the post that you made.please help me

Advertisements

greyknight17

Posted 29 May 2005 - 09:24 AM

greyknight17

Malware Expert

Visiting Consultant

16,560 posts

Hi giggler and welcome to GTG.

Before you do anything else, please create a folder for HijackThis and put it in a permanent folder (like C:\HJT) instead of the Temp folder. This is required because HijackThis will create backups and we don't want them to be deleted.

Please print out the instructions here (or save it in Notepad) so that you can follow along more easily.

Reboot into Safe Mode by hitting the F8 key repeatedly until a menu shows up (and choose Safe Mode from the list). In some systems, this may be the F5 key, so try that if F8 doesn't work.

Once in Safe Mode, please double-click on nailfix.cmd (or nailfix2k.bat if you have Windows 2000). Your desktop and icons will disappear and reappear, and a window should open and close very quickly --- this is normal.

Next run a full scan in Ewido. Post the log from the Ewido scan here.

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):

1. Unzip/extract the files inside to a folder on your desktop.2. Open the folder. Double click on FindIt's.bat and wait for Notepad to open a text file. It will take a while so please be patient ...3. Then post the results here.

giggler

Posted 29 May 2005 - 11:16 AM

giggler

New Member

Topic Starter

Member

3 posts

ok i did all of those things you told me to do and hear are the results:Logfile of HijackThis v1.99.1Scan saved at 17:50:57, on 29/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Microsoft Windows XP [Version 5.1.2600]The current date is: 29/05/2005 PLEASE NOTE THAT ALL FILES FOUND BY THIS METHOD ARE NOT BAD FILES, THERE MIGHT BE LEGIT FILES LISTED AND PLEASE BE CAREFUL WHILE FIXING. IF YOU ARE UNSURE OF WHAT IT IS LEAVE THEM ALONE. »»»»»»»»»»»»»»»»»»»»»»»» Todo Files found »»»»»»»»»»»»»»»»»»»»»»»»»»»»»

1. Unzip/extract the files inside to a folder on your desktop.2. Open the folder. Double click on FindIt's.bat and wait for Notepad to open a text file. It will take a while so please be patient ...3. Then post the results here.

greyknight17

Posted 02 June 2005 - 08:53 PM

greyknight17

Malware Expert

Visiting Consultant

16,560 posts

Your log is clean.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer and uncheck the same box to enable System Restore.